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In the claims: 

Following is a complete set of claims as amended with this Response. 

1 . (Currently Amended) A method comprising: 

rppigtexm p a first network device an d a second network device to a policy server; 
rer^m ? network discovery policies from the policy server at the firs t and second 
network devices; 

identifying the a second network device at the a first network device in 
accordance with the received policies; 

sending a message from the first network device to the second network device, the 
message establishing the identity of any network device between the first network device 
and the second network device in accordance with the received policies: 

compiling the established identities to determine the topology of the network. 

2. (Original) The method of Claim 1 , wherein identifying the second network 
device comprises receiving an address of the second network device from a third network 
device. 

3 . (Original) The method of Claim 1 , wherein the first network device 
comprises a plurality of network interfaces, the method farther comprising selecting an 
interface to the second device by sending a packet from eacb of the plurality of network 
interfaces to an address of the second network device and selecting an interface that 
corresponds to any reply received from the second network device. 
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4. (Original) The method of Claim 3, wherein sending a packet from each of 
the plurality of network interfaces comprises sending a PING packet from each of the 
plurality of network interfaces. 

5. (Original) The method of Claim 1, wherein sending the message 
comprises sending a plurality of messages to the second network device, each message 
having an incrementally greater time to live until a message reaches the second network 
device. 

6. (Original) The method of Claim 1, wherein sending the message 
comprises executing a Traceroute utility at the first network device to determine the route 
of a packet between the first and second network device. 

7. (Original) The method of Claim 1 , further comprising: 
identifying a third network device at the first network device; 

sending a message from the first network device to the third network device, the 
message establishing the identity of any network device between the first network device 
and the third network device. 

8. (Original) The method of Claim 1 , further comprising sending a packet to 
a third network device to provoke the third network device to identify an address 
corresponding to a port at which the packet was received and wherein compiling further 
comprises compiling the identified address. 

9. (Original) The method of Claim 1, further comprising sending a packet to 
a third network device addressed to a port that does not exist on the third network device 
in order to provoke the third network device to send an error message to the first network 
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device that identifies an address of the third network device corresponding to the port at 
which the packet was received and wherein compiling further comprises compiling the 
identified address. 

10. (Currently Amended) A machine-readable medium having stored thereon 
data representing sequences of instructions which, when executed by a machine, cause 
the machine to perform operations comprising: 

re gistering a first network device and a secon d network device to a policy server; 

receiving network discovery policies from th e policy server at the first and second 
network devices; 

identifying the a second network device at the a first network device in 
accordance with the received policies ; 

sending a message from the first network device to the second network device, the 
message establishing the identity of any network device between the first network device 
and the second network device in accordance with the received policies; 

compiling the established identities to determine the topology of the network. 

1 1. (Original) The medium of Claim 10, wherein the instructions for 
identifying the second network device further comprise instructions which, when 
executed by the machine, cause the machine to perform further operations comprising 
receiving an address of the second network device from a third network device. 

12. (Original) The medium of Claim 10, wherein the first network device 
comprises a plurality of network interfaces, the instructions further comprising 
instructions which, when executed by the machine, cause the machine to perform further 
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operations comprising selecting an interface to the second device by sending a packet 
from each of the plurality of network interfaces to an address of the second network 
device and selecting an interface that corresponds to any reply received from the second 
network device. 

13. (Original) The medium of Claim 10, wherein the instructions for sending 
the message further comprise instructions which, when executed by the machine, cause 
the machine to perform further operations comprising sending a plurality of messages to 
the second network device, each message having an incrementally greater time to live 
until a message reaches the second network device. 

1 4. (Original) The medium of Claim 1 0, further comprising instructions, when 
executed by the machine, cause the machine to perform further operations comprising: 

identifying a third network device at the first network device; 

sending a message from the first network device to the third network device, the 
message establishing the identity of any network device between the first network device 
and the third network device. 

1 5 . (Original) The medium of Claim 1 0, further comprising instructions 
which, when executed by the machine, cause the machine to perform further operations 
comprising sending a packet to a third network device to provoke the third network 
device to identify an address corresponding to a port at which the packet was received 
and wherein the instructions for compiling comprise further instructions which, when 
executed by the machine, cause the machine to perform further operations comprising 
compiling the identified address. 
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1 6. (Currently Amended) A method comprising: 

repsterin p a first network device and a second network device to a policy server; 
r^itnn p network discovery policies fro m the nolicv server at the first and second 
network devices; 

identifying the a second network device at the a first network device in 
accordance with th e received policies; 

sending a Traceroute message from the first network device to the second network 
device, to determine addresses of any network device between the first network device 
and the second network device in accordance w ith the received policies; 

compiling the addresses to determine the topology of the network. 

17. (Original) The method of Claim 16, wherein identifying the second 
network device comprises receiving an identification of the second network device, 
including its address from a policy server. 

1 8 . (Original) The method of Claim 1 6, wherein the first network device 
comprises a plurality of network interfaces, the method further comprising selecting an 
interface to the second device by sending a PING message from each of the plurality of 
network interfaces to an address of the second network device and selecting an interface 
that corresponds to any reply received to the PING message from the second network 
device. 

19. (Original) The method of Claim 16, wherein the Traceroute message 
comprises a plurality of messages to the second network device, each message having an 
incrementally greater time to live until a message reaches the second network device. 
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20. (Original) The method of Claim 16, further comprising sending a packet to 
a third network device addressed to a port that does not exist on the third network device 
in order to provoke the third network device to send an error message to the first network 
device that identifies an address of the third network device corresponding to the port at 
which the packet was received and wherein compiling further comprises compiling the 
identified address. 

21 . (New) The method of Claim 1, further comprising sending the established 
identities to the policy server in accordance with the received policy. 

22. (New) The method of Claim 21 wherein compiling comprises compiling 
the established identities at the policy server to determine the topology of the network. 
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